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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows. 

1. (Previously Presented) A method of managing resources, said method comprising: 

accessing a list of resources, wherein a resource comprises an object defined by a service 

type and wherein a resource is identifiable by a resource name; 
comparing a first resource name for a first resource to a second resource name for a second 
resource to identify a relationship between said first and second resources wherein 
said relationship is based on said first resource name and said second resource name 
and wherein said relationship determines that the second resource is a sub-resource 
of the first resource; and 
representing said first and second resources in a hierarchical organization reflecting said 
relationship, wherein said hierarchical organization comprises a top-level resource 
name and a plurality of sub-resource names corresponding to said top level resource 
name, wherein said plurality of sub-resource names comprises said top-level resource 
name and an additional name portion separated from said top-level resource name by 
a delimiter; 

intercepting a request identifying a resource; and 

locating said resource in said hierarchical organization, wherein said resource is subject to a 
policy definition governing access to said resource, wherein the policy definition 
comprises: 

a rule that references said resource and comprises at least one action 

associated with the resource, 
a condition that comprises a constraint on the at least one action, 
a subject that defines a collection of users to whom the policy definition 

applies, and 

a referral that comprises an identification of a second policy decision point to 
which the evaluation of the policy definition is being delegated. 



2. (Canceled) 
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3. (Original) The method of claim 1, further comprising: 

listing said resources in order according to their respective relationships. 

4. (Previously Presented) The method of claim 1, wherein a resource name comprises a plurality of 
components, wherein one component is separated from another component by said delimiter. 

5. (Original) The method of claim 4, wherein said comparing comprises: 

receiving information identifying what is used as said delimiter. 

6. (Original) The method of claim 4, wherein said comparing comprises: 

receiving information for wildcard pattern matching of resource names. 

7. (Original) The method of claim 4, wherein said comparing comprises: 

receiving information indicating whether a resource name is case-sensitive. 

8. (Original) The method of claim 1, wherein one of said first and second resources is identified as 
a sub-source of the other. 

9. (Previously Presented) A computer system comprising: 

a memory unit; and 

a processor coupled to said memory unit, said processor for executing a method of managing 

resources, said method comprising: 
receiving a listing of resources, wherein a resource comprises an object defined by a service 

type and wherein a resource is identifiable by a resource name; 
determining a relationship between a first resource and a second resource by comparing their 

resource names, wherein said relationship determines that the second resource is a 

sub-resource of the first resource; and 
arranging said first and second resources in a hierarchical organization reflecting said 

relationship, wherein said hierarchical organization comprises a top-level resource 

name and a plurality of sub-resource names corresponding to said top level resource 

name, wherein said plurality of sub-resource names comprises said top-level resource 
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name and an additional name portion separated from said top-level resource name by 
a delimiter; 

intercepting a request identifying a resource; and 

traversing said hierarchical organization to locate said resource, wherein said resource is 
subject to a policy definition governing access to said resource, wherein the policy 
definition comprises: 

a rule that references said resource and comprises at least one action 

associated with the resource, 
a condition that comprises a constraint on the at least one action, 
a subject that defines a collection of users to whom the policy definition 
applies, and 

a referral that comprises an identification of a second policy decision point to 
which the evaluation of the policy definition is being delegated. 

10. (Canceled) 

1 1 . (Previously Presented) The computer system of claim 9, wherein a resource name comprises a 
plurality of components, wherein one component is separated from another component by said 
delimiter. 

12. (Original) The computer system of claim 11, wherein said determining comprises: 

identifying a character type used as said delimiter. 

13. (Original) The computer system of claim 11, wherein said determining comprises: 

identifying wildcard pattern used for comparing resource names. 

14. (Original) The computer system of claim 1 1, wherein said determining comprises: 

indicating whether a resource name is case-sensitive. 

15. (Canceled) 
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16. (Previously Presented) A computer-usable medium having computer-readable program code 
embodied therein for causing a computer system to perform a method of managing resources, 
said method comprising: 

accessing a list of resources, wherein a resource comprises an object defined by a service 
type and wherein a resource is identifiable by a resource name; 

comparing a first resource name for a first resource to a second resource name for a second 
resource to identify a relationship between said first and second resources wherein 
said relationship is based on first resource name and said second resource name and 
wherein said relationship determines that the second resource is a sub-resource of the 
first resource; and 

representing said first and second resources in a hierarchical organization reflecting said 
relationship, wherein said hierarchical organization comprises a top-level resource 
name and a plurality of sub-resource names corresponding to said top level resource 
name, wherein the plurality of sub-resource names comprises said top-level resource 
name and an additional name portion separated from said top-level resource name by 
a delimiter; 

intercepting a request identifying a resource; and 

locating said resource in said hierarchical organization, wherein said resource is subject to a 
policy definition governing access to said resource, wherein the policy definition 
comprises: 

a rule that references said resource and comprises at least one action 

associated with the resource, 
a condition that comprises a constraint on the at least one action, 
a subject that defines a collection of users to whom the policy definition 

applies, and 

a referral that comprises an identification of a second policy decision point to 
which the evaluation of the policy definition is being delegated. 

17. (Canceled) 
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18. (Original) The computer-usable medium of claim 16 wherein said computer-readable program 
code embodied therein causes said computer system to perform said method further comprising: 

listing said resources in order according to their respective relationships. 

19. (Previously Presented) The computer-usable medium of claim 16 wherein a resource name 
comprises a plurality of components, wherein one component is separated from another 
component by said delimiter. 

20. (Original) The computer-usable medium of claim 19, wherein said computer-readable program 
code embodied therein causes said computer system to perform said method further comprising: 

receiving information identifying what is used as said delimiter. 

21. (Original) The computer-usable medium of claim 19, wherein said computer-readable program 
code embodied therein causes said computer system to perform said method further comprising: 

receiving information for wildcard pattern matching of resource names. 

22. (Original) The computer-usable medium of claim 19, wherein said computer-readable program 
code embodied therein causes said computer system to perform said method further comprising: 

receiving information indicating whether a resource name is case-sensitive. 

23. (Original) The computer-usable medium of claim 16 wherein one of said first and second 
resources is identified as a sub-resource of the other. 

24. (Previously Presented) A method of managing resources, said method comprising: 

accessing a list of resources, wherein a resource comprises an object defined by a service 
type and wherein a resource is identifiable by a resource name having a number of 
name components, wherein said number of name components are separated by 
delimiters; 

comparing a name component of a first resource name to a name component of a second 
resource name to identify a relationship between a first resource and a second 
resource, wherein said relationship determines that the second resource is a sub- 
resource of the first resource; 
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organizing said first and second resource names in a hierarchical structure according to said 
relationship, wherein said hierarchical structure comprises a top-level resource name 
and a plurality of sub-resource names corresponding to said top level resource name, 
wherein said plurality of sub-resource names comprises said top-level resource name 
and an additional name portion separated from said top-level resource name by a 
delimiter; 

intercepting a request for access to said resource; and 

locating said resource in said hierarchical structure; wherein said resource is subject to a 
policy definition governing access to said resource, wherein the policy definition 
comprises: 

a rule that references said resource and comprises at least one action 

associated with the resource, 
a condition that comprises a constraint on the at least one action, 
a subject that defines a collection of users to whom the policy definition 

applies, and 

a referral that comprises an identification of a second policy decision point to 
which the evaluation of the policy definition is being delegated. 

25. (Original) The method of claim 24, wherein said comparing comprises: 

receiving information identifying a character used as said delimiter. 

26. (Original) The method of claim 24, wherein said comparing comprises: 

receiving information for wildcard pattern matching of resource names. 

27. (Original) The method of claim 24, wherein said comparing comprises: 

receiving information indicating whether said resource name is case-sensitive. 

28. (Currently Amended) The method of claim [[2]] 1, further comprising: 

forwarding the request identifying the resource from a first policy decision point to the 
second policy decision point for evaluation. 
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29. (Currently Amended) The method of claim [[2]] 1, further comprising: 

storing the policy decision in a cache, wherein the policy decision is used to evaluate a 
subsequent request for said resource. 
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